[FFmpeg-devel] [PATCH v2] avformat/jpegxl_anim_dec: avoid overrun with jxlp boxes in container

Leo Izen leo.izen at gmail.com
Sun Jun 18 17:32:10 EEST 2023


On 6/16/23 14:35, Leo Izen wrote:
> On 6/12/23 09:22, Leo Izen wrote:
>> This switches the jpegxl_collect_codestream_header function to use
>> avcodec/bytestream2, which better enforces barriers, and should avoid
>> overrunning buffers with jxlp boxes if the size is zero or if the size
>> is so small the box is invalid.
>>
>> Signed-off-by: Leo Izen <leo.izen at gmail.com>
>> ---
>>   libavformat/jpegxl_anim_dec.c | 56 +++++++++++++++++++----------------
>>   1 file changed, 30 insertions(+), 26 deletions(-)
> 
> Will push soon if there's no objections, as this fixes a bug.
> 
> - Leo Izen
> 

Pushed as 61047f0f82c76620cc42888958dd9834bcaa18fb.

- Leo Izen (Traneptora)


More information about the ffmpeg-devel mailing list